VPN LAN TO LAN draytek 2925 to ASA 5525-x can not ping

[phuong.nguyenvan]

Dear Support Cisco

Hi build LAN to LAN VPN from draytek 2925 to Cisco ASA 5525-x using ipsec IKEV1

• The WAN IP address of CISCO ASA is 1.1.1.1, while LAN IP address is 172.16.17.0 /255.255.255.0
• The WAN1 IP address of Draytek 2925 is 2.2.2.2; while LAN IP is 172.16.128.0 /255.255.255.0 I followed this how-to in order to set up the VPN: https://cloudrun.co.uk/networking/configuring-site-to-site-vpn-from-cisco-asa-to-a-draytek-router/

My connect vpn from successfull.

• I can ping from lan draytek(172.16.128.10) to lan asa (172.16.17.10) successful  but the opposite is not possible although config nat and access list on asa 5525-x
• 
• Please help to any advice

Thanks

[Afolarin Omole]

@phuong.nguyenvan 

Please can you oaste here output from the packet tracer from ASA , just to check how traffic has been inspected. Also the SPI value for each side or paste the output of the phase 2 verification for the devices.